Subdomain Finder

Consider helping the project, check out our Hall of Fame

Result of baobab.io


Scan date 2026-09-29 07:14:20
Domain Country: British Indian Ocean Territory (IO)
Subdomains found: 93
Most used IP: 63.185.209.218 (6x)
Whois Check Check Status Download JSON Download CSV Copy to clipboard
Subdomain IP Cloudflare
admin.dev.red-team.baobab.io 136.110.217.1
admin.prod.red-team.baobab.io 35.234.94.91
alertmanager.customer.baobab.io 63.185.209.218
alertmanager.dev.red-team.baobab.io 34.159.104.132
alertmanager.prod.baobab.io 63.184.112.14
alertmanager.prod.red-team.baobab.io 35.198.166.254
alertmanager.stage.baobab.io 52.58.155.45
api.dev.baobab.io 63.182.198.44
api.prod.baobab.io 35.157.252.137
api.stage.baobab.io 35.157.236.110
argoworkflows.dev.red-team.baobab.io 34.159.104.132
argoworkflows.prod.red-team.baobab.io 35.198.166.254
auth.baobab.io 13.249.228.22
auth.dev.baobab.io 18.245.199.82
auth.stage.baobab.io 3.165.136.7
boabab-insurance.prod.red-team.baobab.io 35.234.94.91
broker.baobab.io 52.222.169.129
broker.dev.baobab.io 3.174.141.80
broker.prod.baobab.io 35.157.252.137
broker.stage.baobab.io 18.164.52.113
client.baobab.io 18.245.175.115
client.dev.baobab.io 143.204.194.112
client.stage.baobab.io 143.204.194.82
customer.baobab.io 18.154.63.26
customer.customer.baobab.io 63.185.209.218
customer.dev.baobab.io 13.227.173.42
customer.stage.baobab.io 18.245.199.96
deepscan.dev.red-team.baobab.io 34.159.104.132
deepscan.prod.red-team.baobab.io 35.198.166.254
expected-loss.dev.baobab.io 52.58.155.45
expected-loss.prod.baobab.io 63.185.209.218
expected-loss.stage.baobab.io 52.58.155.45
grafana.customer.baobab.io 63.185.209.218
grafana.dev.red-team.baobab.io 34.159.104.132
grafana.prod.baobab.io 63.185.209.218
grafana.prod.red-team.baobab.io 35.198.166.254
grafana.stage.baobab.io 52.58.155.45
integration.baobab.io 63.185.209.218
integration.dev.baobab.io 63.182.198.44
integration.stage.baobab.io 63.182.198.44
jupyter.prod.baobab.io 63.184.112.14
lightdash.dev.analytics.baobab.io 34.159.104.132
lightdash.prod.analytics.baobab.io 35.198.166.254
ops.baobab.io 13.227.173.81
ops.dev.baobab.io 18.245.175.66
ops.stage.baobab.io 18.155.129.13
prometheus.customer.baobab.io 63.184.112.14
prometheus.dev.red-team.baobab.io 34.159.104.132
prometheus.prod.baobab.io 35.157.252.137
prometheus.prod.red-team.baobab.io 35.198.166.254
prometheus.stage.baobab.io 52.58.155.45
storybook.stage.baobab.io 13.249.228.54
test-demo.dev.red-team.baobab.io 35.246.168.8
www.baobab.io 198.202.211.1
admin.red-team.baobab.io none
alertmanager.dev.baobab.io none
alertmanager.gcp.red-team.baobab.io none
alertmanager.prod.gcp.red-team.baobab.io none
alertmanager.red-team.baobab.io none
api.cysmo.dev.baobab.io none
argoworkflows-new.red-team.baobab.io none
argoworkflows.gcp.red-team.baobab.io none
argoworkflows.prod.gcp.red-team.baobab.io none
argoworkflows.red-team.baobab.io none
argoworkflowsss.red-team.baobab.io none
boabab-insurance.red-team.baobab.io none
deepscan-dev.red-team.baobab.io none
deepscan.gcp.red-team.baobab.io none
deepscan.prod.gcp.red-team.baobab.io none
deepscan.red-team.baobab.io none
dev.analytics.baobab.io none
dev.baobab.io none
dev.red-team.baobab.io none
echo.dev.baobab.io none
grafana.dev.baobab.io none
grafana.gcp.red-team.baobab.io none
grafana.prod.gcp.red-team.baobab.io none
grafana.red-team.baobab.io none
jupyter.dev.baobab.io none
jupyter.stage.baobab.io none
lightdash.gcp.red-team.baobab.io none
new.dev.baobab.io none
prod.analytics.baobab.io none
prod.baobab.io none
prod.ir.baobab.io none
prod.red-team.baobab.io none
prometheus.dev.baobab.io none
prometheus.gcp.red-team.baobab.io none
prometheus.prod.gcp.red-team.baobab.io none
prometheus.red-team.baobab.io none
saml-poc-1.dev.red-team.baobab.io none
saml-poc.dev.red-team.baobab.io none
stage.baobab.io none
Show 39 subdomains without IP
IP Count
63.185.209.2186
34.159.104.1326
35.198.166.2546
52.58.155.455
63.184.112.143
63.182.198.443
35.157.252.1373
35.234.94.912
198.202.211.11
Performing a scan might take up to 1 minute. So please be patient while we're scanning. After a subdomain has been scanned, we will store the data in our cache for 7 days.

Disclaimer: All data that is fetched is coming from public sources making it not fall under disclosing private information as any individual can reach this data with the right steps of research. If you believe your information is published by mistake and want specific data to be removed, make sure to send us an email proving you are the owner of this data and which data you want to have removed. If you are acting on behalf of your client, make sure to provide us with a signed statement proving so.
If you believe we are violating any law by publishing certain data, make sure to contact us with the specific law you believe we are violating. We are not affiliated with baobab.io.

If you have any questions or suggestions, feel free to send an email to [email protected]

Brought to you by C99.nl